• Managed Microsoft 365 tenants, overseeing administration tasks and ensuring efficient license management for users• Led successful migration projects from on-premises Exchange to Exchange Online, ensuring data integrity and minimal user disruption• Configured and optimized Exchange Online features, including email routing, distribution lists, and shared mailbox• Configured, troubleshooted, and efficiently managed Exchange Server 2016 and Exchange Online in Hybrid environment. Ensuring optimal functionality and performance• Directed a seamless migration from on premise Exchange to Microsoft 365, overseeing strategic planning, and execution, and providing post-migration support to ensure a smooth and uninterrupted transition for users while maintaining the integrity of data• Conducted comprehensive assessments of organizational licensing needs, ensuring strategic procurement and utilization of Microsoft 365 licenses to optimize costs while meeting operational requirementsOrchestrated the effective implementation of logical access controls across enterprise systems to uphold integrity, confidentiality, privacy, and availability.• Responsible for day-to-day administration of the Entra ID and on-premises AD. • Developed and implemented PowerShell scripts for automating Microsoft 365 and Active Directory configurations, enhancing operational efficiency and security resilience.• Led the deployment and configuration of Microsoft PIM to enhance security and compliance within the organization.• Configured PIM settings, policies, and workflows to align with organizational security requirements and best practices.• Implemented role-based access controls (RBAC) and just-in-time (JIT) access to minimize the risk of excessive or unnecessary access privileges.• Managed privileged access requests and approvals, ensuring that elevated access was granted only when necessary and for a limited duration.

Delivered end-user support for hybrid identity solutions, including day-to-day management of EntraID and Active Directory authentication issues, user provisioning, and group policy adjustments.Resolved application support issues involving SailPoint IdentityIQ, streamlining user provisioning and de-provisioning processes.Troubleshot and automated provisioning tasks using PowerShell scripts, directly improving efficiency and minimizing downtime for end-users.Collaborated with end-users, business units, and cross-functional IT teams to resolve access and permission issues with internal applications, ensuring compliance and user satisfaction.Resolved application support issues involving SailPoint IdentityIQ, streamlining user provisioning and de-provisioning processes.Troubleshot and automated provisioning tasks using PowerShell scripts, directly improving efficiency and minimizing downtime for end-users.

Managed and maintained a hybrid identity environment, integrating Microsoft Entra ID with on-premises Active Directory to provide seamless authentication and single sign-on (SSO) capabilities across cloud and on-premises resourcesDeveloped and implemented Data Loss Prevention (DLP) policies using Microsoft Purview to protect sensitive information.Ensured compliance with PIPEDA by creating DLP policies tailored to detect and prevent unauthorized sharing of personally identifiable information (PII) across emails and documents.Deployed and managed SSO and MFA solutions for seamless user authentication across on-premises and cloud-based services.Utilized PowerShell for user provisioning, automation, and managing access policies in Active Directory and Azure AD.

Designed and implemented Microsoft Cloud services on Azure and Office 365.Provided end-user support for Microsoft 365 applications and Active Directory configurations, addressing user access, password, and profile management issues.Created and maintained detailed documentation for end-users, reducing service desk dependency and empowering users to troubleshoot basic issues.Assisted with the implementation of role-based access controls and data governance policies, ensuring the proper handling of sensitive client data.Collaborated with IT security to analyze and remediate email-related threats, maintaining business continuity and protecting end-users.Implemented EntraID App Registrations and SSO for secure access to child welfare databases.Managed role-based access controls (RBAC) to protect sensitive client information.compatibility with legacy applications that were not supported on Exchange 2016Implemented advanced Office 365 features including data governance and compliance (sensitivity labelling, DLP, E-Discovery, In-Place Hold, Retention Tags, Encryption).Analyzed and mitigated email-related threat attacks in collaboration with IT Security, including blacklisting/whitelisting and custom spam prevention rules.Designed recovery processes for databases and mailbox restoration.Implemented Exchange Online Protection/Advanced Threat Protection and Conditional Access Policies.Configured DNS records for email and domain security (SPF, DKIM, DMARC) in Exchange environment.

In a comprehensive role, I orchestrated the migration of over 2000 primary and archive mailboxes to Exchange Online, employing various methods, including the Network Upload method for large archive mailboxes. I played a pivotal role in implementing Mobile Application Management (MAM) policies in Microsoft Intune and configured Android for work device management. Additionally, I managed the deployment of store applications to mobile devices and specific user groups, created and updated Configuration and Compliance policies, and ensured the compliance of mobile devices using Microsoft Intune. My responsibilities extended to proactive analysis and resolution of end-user application and connectivity issues, as well as the implementation of a phased rollout of Microsoft Teams, including end-user support, training, and communication. I actively participated in disaster recovery drills, designed recovery plans, managed privileged accounts within the M365 environment, and continuously monitored for security threats, taking immediate action to mitigate risks. Additionally, I collaborated with the vulnerability assessment team, conducted security incident response, and maintained detailed documentation related to configurations, access controls, and security procedures. Furthermore, I promoted security awareness among the M365 user community, conducted training sessions, conducted message tracking and troubleshooting activities, and successfully resolved Tier-2 and Tier-3 tickets related to messaging and collaboration systems, leveraging PowerShell for administrative tasks.

• Planned and executed migration of Exchange 2010 resources to Office 365.• Implemented Exchange 2016 Hybrid Server for on-premises mail management and mail relay.• Configured AD Azure Connect with Password Sync.• Conducted POC for AD infrastructure deployment and migration strategy, including Group Policy redesign and third-party tool deployment.• Supported Hybrid Exchange 2010/2016 and Office 365 environment with 175,000+ mailboxes.• Deployed, configured, and managed Mimecast Cloud-based Secure Email Gateway.• Maintained SLAs for email administration and troubleshooting in hybrid environments (ADFS 2.0, Azure AD Connect).• Configured SMTP Relay server and connectors for mass email solutions.• Collaborated with software developers and QA teams to support application automation, deployment, and configuration.• Performed VM migrations (cold and hot) in vCenter and SCVMM environments.• Created and updated Active Directory group policies.• Designed and implemented resilient Exchange 2010 deployment and migration strategies.• Implemented secure email infrastructure with redundancy and client access optimization.• Installed and maintained IIS 7.0, troubleshooting site issues.• Deployed new domain controllers and integrated them into existing domains.• Provided infrastructure support and maintenance for Production environments, including SCCM 2012 and client workstations.